September 9, 2025—KB5065426: Update for Windows Server 2025 (OS Build 26100.6584)

Improvements

This security update contains fixes and quality improvements from KB5063878 (released August 12, 2025). The following summary outlines key issues addressed by this update. Also, included are available new features. The bold text within the brackets indicates the item or area of the change. ​​​​

• [Settings]

  • New!  Find answers to commonly asked questions about Windows Server in the new FAQs section under Settings > System > About. It covers topics like system setup, performance, and compatibility—all in one place.

  • New!​​​​​​​  The dialog to rename your printer under Settings > Bluetooth & devices > Printers & scanners now matches the Windows Server look and feel.

  • New ! Mouse settings are now easier to access under Settings > Accessibility > Mouse and Mouse pointer and touch, with no need to open Control Panel. You’ll find updated icons for Mouse pointer speed and Enhance mouse pointer precision, plus options for customizing the mouse indicator, pointer trails, and hover activation time.

• [Taskbar]

  • New!​​​​​​​  Admins can configure taskbar policies so users can unpin specific apps, ensuring they are not repinned during the next policy refresh. To turn on this feature, use the new PinGeneration option.

  • Fixed: When using Tab and Shift + Tab to move keyboard focus around the taskbar, if you go backwards at least once you can get keyboard focus stuck on the taskbar frame, which could lead screen readers to just say “pane.”

  • Fixed: On login, the keyboard focus might unexpectedly be set to widgets in the taskbar, which can cause widgets to open.

• [Voice Access]

  • New!  Voice access now includes an in-product experience that highlights new features and improvements. Use the settings menu to open or dismiss it anytime.

  • New!  You can find voice access under Accessibility in Quick Settings at the lower-right corner of your screen near the clock. To open Quick Settings, select the network, volume, or battery icon.

  • Fixed: Voice access might stop responding with error “working on it” when dictating.

• [Voice Typing] New! You control the profanity filter. When you turn it on, it masks profanity with asterisks. When you turn it off, words appear as spoken. To change the setting, open voice typing (Win + H), select the settings icon, and turn on the Filter profanity switch.

• [Windows Share]​​​​​​​

  • New!  Make last-minute edits such as cropping, rotating, and adding filters to images shared through the Windows Share window.

  • New!  When you drag a local file from File Explorer or your desktop, a tray appears at the top of your screen. Drop the file into a suggested app or select More​​​​​​​   to open the Windows share window.

  • New! ​​​​​​​ Add apps that support sharing directly to the right-click menu for local files in File Explorer or on the desktop.

• [BitLocker] Fixed: This update addresses an issue where devices with BitLocker on removable drives could encounter a blue screen error after resuming from sleep or hybrid-booting.

• [Bluetooth] Fixed: Settings might stop responding when loading information about Bluetooth devices.

• [Boot menu screens] Fixed: This update addresses the issue where early boot screens, such as BitLocker PIN, BitLocker Recovery key, and boot menu screens, render slowly.

• [Display] Fixed: Unexpected changes to screen size and window position might occur after waking from sleep for some devices.

• [File Explorer] Fixed: If you have disconnected network drives while conducting a search from Home, it might prevent searches from executing and you remain on Home.

• [Input]​​​​​​​

  • Fixed: Voice typing won't start from the touch keyboard when using the Chinese (Simplified) narrow layout.

  • Fixed: When using the Symbols section of the touch keyboard, pressing the key to change pages might unexpectedly insert a character into password fields.

  • Fixed: Typing in some apps might stop working after disconnecting from a remote desktop session.

• [JPG] Fixed: When using CopyPixels the pixels may be unexpectedly inverted in certain cases.

• [Memory leak] Fixed: This update addresses an issue in the Input Service that causes increased memory usage, potentially impacting performance in multi-user, multi-lingual, and remote desktop usage.

• [Microsoft Management Console (MMC)] Fixed: Improved the colors used in MMC when items are selected, both generally, and when contrast modes are enabled.

• [Network]​​​​​​​​​​​​​​ Fixed: This update addresses an issue where Windows Server 2025 always shows the network as "public" on new domain controllers. It now checks for a domain controller name before using loopback addresses to ensure proper Lightweight Directory Access Protocol (LDAP) binding.​​​​​​​

• [Print] Fixed: Non-admin users can't uninstall printers that they’ve added.

• [USB] Fixed: Certain USB devices might become disconnected after sleep, until you reboot your PC.

• [App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background, during the initial installation of an application.

  This issue could prevent non-admin users from running apps that perform MSI repairs, including Office Professional Plus 2010 and multiple applications from Autodesk (including AutoCAD). This fix reduces the scope for requiring UAC prompts for MSI repairs and enables IT admins to disable UAC prompts for specific apps by adding them to an allowlist.

  For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows security update.

• ​​​​​​​[File server] This update enabled auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already supported by SMB Server. For detailed guidance, see CVE-2025-55234.

• [PowerShell 2.0] Starting in September 2025, Windows Server 2025, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain available and supported. If you use older scripts or tools that depend on PowerShell 2.0, update them to avoid compatibility issues.

If you've already installed previous updates, your device will download and install only the new updates included in this package.

For more information about security vulnerabilities, please refer to the Security Update Guide and the September 2025 Security Updates.

Known issues in this update​​​​​​​

How to get this update

Before you install this update

​​​​​​​Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Install this update

To install this update, use one of the following Windows and Microsoft release channels.

Windows UpdateBusinessCatalogServer Update Services

Available	Next Step
	This update downloads and installs automatically from Windows Update and Microsoft Update.

If you want to remove the LCU

To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.

Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.

File Information

For a list of the files provided in this update, download the file information for cumulative update 5065426. 

For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5064531) - version 26100.5074.